This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
File: dEjFUfV_GGOM8awfxMv-1D3vT64.mft (raw, json)
Hash identifier: ZqcoxvgDY6Fc+1685OevzB862LYGNf2I0ZBQE2rWLms=
Subject key identifier: 0C:2B:E2:B2:39:C1:FD:72:72:BA:57:74:5A:31:88:71:98:E8:70:0F
Authority key identifier: 74:48:C5:51:F5:7F:18:63:8C:F1:AC:1F:C4:CB:FE:D4:3D:EF:4F:AE
Certificate issuer: /CN=A914354F/serialNumber=7448C551F57F18638CF1AC1FC4CBFED43DEF4FAE
Certificate serial: 1C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
Manifest number: 16
Signing time: Fri 19 Dec 2025 06:56:32 +0000
Manifest this update: Fri 19 Dec 2025 06:56:32 +0000
Manifest next update: Fri 26 Dec 2025 06:56:32 +0000
Files and hashes: 1: dEjFUfV_GGOM8awfxMv-1D3vT64.crl (hash: HaKyHKsDJy9yQwlcsyq4OOC5CWgHmsU9qF47pkzflmk=)
2: 8EF088C4D77311F0882D4FBB79D3641D.roa (hash: NEVcv1T1D9u5LyZ1/NMZvoEsyEcog9SLjj/OAI9mCyU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.crl
rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 06:56:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28 (0x1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914354F, serialNumber=7448C551F57F18638CF1AC1FC4CBFED43DEF4FAE
Validity
Not Before: Dec 19 06:56:32 2025 GMT
Not After : Dec 26 06:56:32 2025 GMT
Subject: CN=6944f720-d42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:06:e2:d5:01:12:9f:4e:7c:2d:c1:16:2e:
d1:20:99:fc:c9:ab:e4:ff:ba:38:0a:fa:dc:ca:ab:
b2:64:cf:a6:f1:6b:98:1d:58:20:7c:5b:68:7b:ea:
70:6e:e3:21:35:ac:cd:28:d2:c7:78:1c:b1:ab:b8:
01:4d:b3:58:13:b2:84:95:b5:62:95:2f:9e:cf:2f:
2f:08:76:ed:65:95:12:7b:a5:2a:04:5a:43:87:7c:
48:83:ca:ba:84:f8:d8:28:13:8e:38:a6:81:e1:ba:
6f:1c:96:1a:1c:a6:9a:ef:94:0b:62:96:40:e1:11:
1e:7b:d1:c9:4b:50:4f:27:05:85:a0:4d:52:f6:ef:
a8:9a:1c:76:61:07:ca:ea:06:86:d3:66:41:5d:94:
3b:a9:25:10:39:b1:f2:07:d4:26:03:16:87:5c:b1:
3d:99:ae:99:c5:5b:45:8b:3c:b3:fd:75:12:43:2a:
2b:96:f3:37:79:17:a1:97:f8:2c:b4:f4:8b:37:2b:
d6:26:20:9e:d9:7e:b8:66:5c:b2:3b:2f:cd:57:58:
0c:2b:f1:6c:c8:76:a5:b9:50:c3:5e:d3:d9:2c:8f:
3e:b3:6a:15:75:fe:a2:ff:fc:1b:7f:d4:bb:b5:1b:
a0:d5:a6:b1:7a:17:48:8f:2c:97:10:4c:e2:04:72:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2B:E2:B2:39:C1:FD:72:72:BA:57:74:5A:31:88:71:98:E8:70:0F
X509v3 Authority Key Identifier:
keyid:74:48:C5:51:F5:7F:18:63:8C:F1:AC:1F:C4:CB:FE:D4:3D:EF:4F:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dEjFUfV_GGOM8awfxMv-1D3vT64.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914354F/6D193A9ACC6311F09025DF37C4F9AE02/dEjFUfV_GGOM8awfxMv-1D3vT64.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3e:19:28:15:61:c8:57:b0:a9:47:c1:bf:57:e7:ad:c7:bc:ec:
27:a8:93:6c:aa:c9:f5:38:fd:73:32:b5:c4:a3:e6:0a:04:39:
e7:2e:44:81:a2:b2:49:e0:ab:27:21:01:61:e6:30:06:81:33:
18:e3:a6:a4:a9:6c:47:70:f1:62:7f:1f:e8:fb:30:38:e1:38:
c0:b3:73:9d:54:10:5b:ae:91:c6:01:ce:2c:cf:28:9a:fa:28:
8c:e9:db:fb:2d:1b:cd:11:63:f7:83:fb:d2:16:d6:3a:ff:9a:
cd:7f:0e:05:45:74:2a:e7:7a:24:47:bf:38:2b:0a:4b:6e:b9:
67:72:8b:ee:9b:ae:6a:39:59:2c:f8:00:ee:df:d6:e4:0a:c5:
f7:7f:b9:55:2b:c5:37:7f:3e:a3:4c:dc:9b:e2:c5:37:3e:71:
a2:fb:b0:3b:10:69:26:5e:02:1e:08:41:54:19:9d:09:7a:7b:
3d:f7:1e:1b:27:6b:b4:1d:24:8f:43:93:c4:d6:23:4e:bf:aa:
61:49:1d:5a:df:30:e8:bc:fa:5b:0c:74:59:18:5d:00:07:fb:
44:36:0d:72:4c:cf:f7:37:bd:44:37:41:92:38:81:25:1c:dd:
2d:73:e7:74:1a:2f:40:bf:42:32:69:eb:ff:46:a7:b8:ed:46:
69:51:99:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:57:00 2025 by rpki-client